[Opendnssec-user] Keep timestamp and re-sign

[Jakob Schlyter]

On 19 mar 2012, at 17:54, Casper Gielen wrote:

> From the top of my head is the default policy set to 7 days.

Yes.


> After that validation will fail. I've been pondering the question wether or not to
> raise this significantly. If something goes wrong during a
> vacation-period there is a real risk that we will not be able to fix it
> in time.

I would recommend people to start with something like 14 days to be on the safe side.

FWIW, Windows Server 8 has a default of 72 hours... #fail


	jakob